No-Fly Zones for Drones: FAA Proposes New Rules Over Critical Infrastructure

The Federal Aviation Administration (FAA) has finally released its long-anticipated Notice of Proposed Rulemaking (NPRM) for drone flight restrictions over critical infrastructure. This marks a significant milestone in U.S. drone regulation, nearly a decade after Congress first authorized these powers under Section 2209 of the FAA Extension, Safety, and Security Act of 2016.

What the NPRM Establishes

The proposed rule creates a formal Unmanned Aircraft Facility Restriction (UAFR) application process, enabling operators of critical infrastructure facilities to establish restricted airspace above their properties. This isn't a blanket ban on drones—it's a structured framework with specific requirements and limitations.

16 Categories of Covered Infrastructure

The NPRM covers a comprehensive range of critical sectors:

• Chemical facilities and refineries
• Energy production and distribution sites
• Telecommunications infrastructure
• Financial services facilities
• Healthcare and medical centers
• Water treatment and distribution systems
• Transportation hubs and networks
• Government facilities
• Defense industrial base sites
• Emergency services installations
• Nuclear facilities
• Dams and hydroelectric plants
• Ports and maritime facilities
• Rail infrastructure
• Data centers and cloud computing facilities
• Other nationally critical assets

The Application Process

Facility operators can now directly apply to the FAA for airspace restrictions without requiring government sponsorship or guarantees. This is a major departure from previous processes that often required congressional or executive-level intervention.

Key Requirements for Applicants

To obtain a UAFR designation, facility operators must demonstrate:

1. Security necessity: Clear evidence that drone operations pose a credible threat to facility safety or security
2. Geographic boundaries: Precise horizontal limits (not to exceed property boundaries) and vertical ceiling (up to 400 feet AGL)
3. Remote ID compliance: The facility must be capable of receiving Remote ID broadcasts from drones operating in the area
4. Advance notification: Procedures for notifying nearby drone operators of the restricted zone
5. Alternative pathways: Documentation showing that existing regulations (such as Part 107 waivers) are insufficient to address the security concerns

Impact on Commercial Drone Operators

The most important question for the drone industry: can commercial operators still fly in these zones?

The answer is yes—but with additional requirements.

Part 107 operators who meet specific criteria can continue operations within designated UAFR zones:

• Remote ID compliance: Aircraft must broadcast Remote ID information throughout the operation
• Advance coordination: Operators must notify the facility before conducting flights
• Operational transparency: Flight plans and pilot credentials may be subject to review
• Insurance requirements: Enhanced liability coverage may be required for operations near critical infrastructure

This represents a balanced approach that protects security interests while preserving the commercial viability of drone operations in these areas.

Standard UAFR vs. Special UAFR

The NPRM distinguishes between two types of restrictions:

Standard UAFR

• Covers typical critical infrastructure facilities
• Horizontal boundaries limited to property lines
• Vertical limit of 400 feet AGL
• Processing time: 90-120 days
• Valid for 5 years, renewable

Special UAFR

• For facilities with exceptional security requirements
• May extend beyond property boundaries in limited circumstances
• Higher vertical limits possible with justification
• Requires additional documentation and review
• Subject to public comment period before approval

Timeline and Public Comment

The NPRM is now open for public comment with a deadline of July 6, 2026. This 45-day comment period allows industry stakeholders, drone operators, and the general public to provide feedback on the proposed framework.

Key dates to remember:

• Comment deadline: July 6, 2026
• Expected final rule: Late 2026 or early 2027
• Implementation period: 180 days after final rule publication
• Full compliance deadline: Mid-2027

Industry Reactions

Early responses from industry stakeholders have been mixed but generally supportive of the structured approach:

Security advocates praise the direct application process, noting that it removes bureaucratic barriers that previously left critical facilities vulnerable.

Commercial drone operators express cautious optimism about the continued access provisions, though some worry about the administrative burden of coordinating with multiple facility operators.

Industry associations are actively reviewing the NPRM to provide consolidated feedback during the comment period.

What This Means for the Future

This NPRM represents more than just new restrictions—it signals the FAA's recognition that drones have become a permanent feature of the national airspace that requires nuanced management.

The framework establishes several important precedents:

1. Property rights vs. airspace rights: The rule carefully balances facility operators' security needs with the public's right to navigable airspace
2. Technology-based solutions: Remote ID requirements leverage existing infrastructure rather than creating entirely new systems
3. Scalable processes: The direct application process can handle hundreds or thousands of facilities without overwhelming FAA resources
4. Commercial accommodation: The continued access provisions demonstrate the FAA's commitment to supporting the drone industry

Preparing for Compliance

For drone operators who regularly work near critical infrastructure:

1. Review your operational areas: Identify which facilities in your service area may apply for UAFR designation
2. Ensure Remote ID compliance: Verify that all aircraft meet current Remote ID requirements
3. Develop coordination procedures: Create templates for advance notification to facility operators
4. Monitor the FAA website: Track which facilities receive UAFR designation as applications are processed
5. Participate in the comment process: Submit feedback on the NPRM before July 6, 2026

Key Takeaway: The FAA's NPRM for critical infrastructure drone restrictions establishes a structured, technology-enabled framework that balances security needs with commercial drone access. Facility operators can directly apply for airspace restrictions, while Part 107 operators maintaining Remote ID compliance and advance coordination can continue operations in designated zones.

Next Steps: Drone operators should review their regular flight areas for potential UAFR designations, ensure Remote ID compliance across their fleet, and prepare coordination procedures for advance notification to critical infrastructure operators.